Static task
static1
Behavioral task
behavioral1
Sample
36e8fac8dbd158ac3ecb2fff37f5df05.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
36e8fac8dbd158ac3ecb2fff37f5df05.exe
Resource
win10v2004-20230703-en
General
-
Target
36e8fac8dbd158ac3ecb2fff37f5df05.exe
-
Size
769KB
-
MD5
36e8fac8dbd158ac3ecb2fff37f5df05
-
SHA1
312f0150ce4eb6a83ef62ab9a305b9db7b4e2754
-
SHA256
3a9430e1b9d36d4a079b2197dd97d51e45adcaaf62bbcd4f06f73c680705a83c
-
SHA512
082f59e68bcd9d44ab0fbb8db265c63992f1c4fdf559d54cd353f5c0add9d1899bf2dda88c0ff9986639cc9d6966b473cb26a9abd5b98e8c0d3a78212b89820f
-
SSDEEP
6144:PClfioA+myzPDbsj26jUlDLR05NV6fMGGMXZCohmQZDv2vbygGO9:KavyzrbsjLUVi5N0IoA2b8bygG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36e8fac8dbd158ac3ecb2fff37f5df05.exe
Files
-
36e8fac8dbd158ac3ecb2fff37f5df05.exe.exe windows x64
b48b068aa9305bcb20264f32058e5570
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetStringTypeW
GetCPInfo
GetLastError
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
GetConsoleWindow
lstrcpynW
WaitForSingleObject
Sleep
CreateThread
GetTickCount
AllocConsole
FreeConsole
SetConsoleCtrlHandler
InitializeCriticalSection
LockResource
GlobalAlloc
GlobalReAlloc
GlobalFree
LCMapStringEx
ReadFile
RtlUnwindEx
RtlPcToFileHeader
RaiseException
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetStdHandle
WriteFile
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
GetConsoleMode
ReadConsoleW
GetFileType
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
GetConsoleOutputCP
GetFileSizeEx
SetFilePointerEx
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetProcessHeap
HeapSize
WriteConsoleW
SetEndOfFile
LocalFree
DecodePointer
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
lstrlenW
LoadLibraryW
LoadLibraryA
GetModuleHandleW
GetCurrentProcessId
ReadProcessMemory
GetProcAddress
GetWindowsDirectoryW
CloseHandle
MultiByteToWideChar
OpenProcess
GetModuleFileNameW
GetCurrentProcess
CreateFileW
GetModuleFileNameA
RtlUnwind
user32
ScreenToClient
AdjustWindowRectEx
GetWindowRect
ValidateRect
ReleaseDC
GetDC
IsWindowVisible
SetWindowPos
ShowWindow
CreateWindowExW
DestroyIcon
UnregisterClassW
PostQuitMessage
DefWindowProcW
PostMessageW
SendMessageW
PeekMessageW
DispatchMessageW
TranslateMessage
LoadCursorW
RegisterClassExW
DrawTextW
DestroyWindow
GetProcessWindowStation
advapi32
GetTokenInformation
OpenProcessToken
ole32
CoUninitialize
CoCreateInstance
CoInitialize
CoGetObject
CoInitializeSecurity
CoInitializeEx
CoSetProxyBlanket
oleaut32
SysAllocString
SysFreeString
VariantInit
SafeArrayPutElement
SafeArrayCreate
VariantClear
wininet
InternetCloseHandle
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetReadFile
HttpOpenRequestW
gdi32
CreateSolidBrush
DeleteDC
DeleteObject
GetStockObject
SelectClipRgn
SelectObject
CreatePen
SetBkMode
SetGraphicsMode
SetTextColor
SetWorldTransform
CreateDIBSection
PolyBezier
Polyline
CreateFontIndirectW
SetBkColor
BitBlt
Polygon
TextOutW
MoveToEx
GetObjectW
ExtCreatePen
SetROP2
SetPolyFillMode
SetPixelV
SelectPalette
RoundRect
RealizePalette
Rectangle
Pie
LineTo
GetTextExtentPoint32W
GetPolyFillMode
GetPixel
GetDIBits
GetCurrentObject
GetClipRgn
GetBkMode
GdiSetBatchLimit
Arc
CreateBitmap
CreateBrushIndirect
CreateRectRgn
Ellipse
ExtFloodFill
FillRgn
GetROP2
CreateCompatibleDC
shell32
ExtractIconW
Sections
.text Size: 238KB - Virtual size: 237KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 402KB - Virtual size: 401KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ